Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: HK8PrnzjBR2qNFnVEKpIziZbPY+qw9In9sUdscIbgqk=
Subject key identifier: 43:59:58:8F:18:7F:41:29:48:7D:0B:CC:09:98:4C:84:B3:BF:19:69
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 01987B9D045E9760CDD5E4FF692A03E68706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 05F0
Signing time: Tue 05 Aug 2025 19:02:24 +0000
Manifest this update: Tue 05 Aug 2025 19:02:24 +0000
Manifest next update: Wed 06 Aug 2025 19:02:24 +0000
Files and hashes: 1: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: ozm3jomDzORDrB32cuTtbvPDFQJWEmUUi2ilUNAKMO8=)
2: t0ukQ5CSEan3v8t7w6xA6LKAlPA.roa (hash: 0NRhgZITCHjsjwAYQth1zntdOiq0gcrilmGiiV4E8WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:04:5e:97:60:cd:d5:e4:ff:69:2a:03:e6:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Aug 5 19:02:24 2025 GMT
Not After : Aug 6 19:02:24 2025 GMT
Subject: CN=4359588f187f4129487d0bcc09984c84b3bf1969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:ed:e2:6a:23:9e:4d:3e:27:a9:4d:b9:de:
78:62:78:4a:b9:63:4c:d7:13:15:b5:a0:32:fb:5e:
fc:cc:cc:8b:dd:d1:88:61:66:67:a1:4e:03:97:3c:
a1:4e:a7:8d:78:65:93:ba:5a:91:4a:63:d4:4b:46:
7f:66:b9:81:89:10:b5:3c:34:8f:e9:fd:27:2e:83:
5d:1e:d9:9c:13:62:92:f5:90:7a:23:26:ea:db:83:
6f:0b:d7:27:65:9e:73:3c:d2:5f:c1:63:af:c1:0c:
10:6e:c3:be:cf:68:51:e0:6d:d2:f8:be:28:8e:38:
db:19:d4:9b:18:87:d4:d7:28:52:b9:c6:cd:d4:80:
ed:c9:da:f4:2f:3c:94:96:03:1c:b4:3b:b6:9c:06:
cb:38:bb:a1:2d:90:5e:a1:f0:ac:aa:93:bc:e4:91:
67:59:b8:a5:ca:16:1a:b6:93:73:42:7a:87:e6:26:
37:52:ab:63:29:e4:fd:ef:81:60:57:62:98:7e:a4:
f1:e9:a3:6e:b6:b5:a4:5c:1d:14:70:e7:a2:8e:88:
e7:b3:eb:d1:b1:3a:fd:f7:7b:e4:cc:60:f5:c7:69:
21:2d:a6:91:11:0f:fd:1c:7f:bc:76:30:69:b7:9e:
45:af:f6:b1:93:f0:e8:be:a4:6f:8f:e9:a4:4f:cc:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:58:8F:18:7F:41:29:48:7D:0B:CC:09:98:4C:84:B3:BF:19:69
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:23:ab:1c:25:aa:e3:bc:46:77:ec:cc:0f:db:85:53:1d:
af:3c:71:f1:41:18:65:a4:48:ff:4d:d8:9a:8e:78:78:14:95:
13:a3:25:63:10:65:b9:94:86:5b:6a:27:c7:d4:52:2e:ab:de:
a2:05:29:b9:e4:1f:b6:8a:d8:aa:98:7f:a6:0f:c2:07:12:9d:
ca:6f:23:27:9a:43:8f:db:d3:b9:6d:b1:ac:1a:14:5e:75:0d:
15:3f:9f:51:ef:5b:93:65:01:59:a5:22:28:d8:67:f7:56:3c:
65:52:30:ea:54:71:09:c3:4f:2e:00:95:e0:96:a0:8b:09:d3:
0b:18:44:96:46:e3:8d:e1:2c:0b:1d:22:0f:15:9a:da:e7:95:
3c:b4:8a:66:88:70:7f:45:12:47:af:0d:0a:f0:1a:c6:12:6e:
8a:4b:b7:82:96:34:1f:56:80:02:af:f3:64:4b:0e:2e:fb:de:
b6:32:f3:0c:8b:2a:7e:8a:05:0d:fd:bd:e2:97:0e:cc:f5:53:
49:4d:d1:92:f7:87:28:96:cb:94:d0:eb:72:1b:91:85:7d:e6:
5c:4d:3e:b1:df:5f:62:3c:da:da:2a:19:11:ec:2b:e3:81:00:
75:bd:80:80:c5:df:39:75:8e:b2:34:22:4a:36:d6:77:4c:7f:
98:ae:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:38 2025 by rpki-client